Information Security Consultant - Chicago Based
Location: US, IL, Chicago
Employment type: Full-time
Required experience: Mid-Senior level
Required education: Bachelor's Degree
Industry: Information Technology and Services
Function: Information Technology

Company profile:
The MarketMaker4 leadership team has extensive experience in e-procurement, online auctions, market intelligence, strategic sourcing, and supply chain consulting. All team members have been involved in the e-enablement of supply chain negotiations since the inception of the industry.MarketMaker4 is an international company with offices in the US, UK, Australia, China and UAE.Our philosophy is to encourage and enable the use of online auction / negotiation techniques by developing proprietary software that has sophisticated functionality, but is also easy to use due to its intuitive design.Of course, software is useless if not used properly, and our support services are integral to our approach. We are the only eSourcing company to include the provision of MarketMaking™ services within its subscriptions.We are also focused on ensuring our clients have timely access to our advisory expertise, market intelligence, and business insights to achieve a positive and successful online auction / negotiation experience.MarketMaker4 is bid neutral, and provides confidential e-auction services to both the event host and the bidders to promote the success of every party involved in an electronic auction / negotiation event.

Job description:
Role SummaryReporting into C-Level stakeholders within the organisation, this role will be involved in all business functions working with a variety of management ensuring all areas of the businesses information assets and technologies are protected.Maintain effective IT and information security controls and protocols across the business line.Plan and Implement ISO 27001 certification.Adapt the global policy and implement in the business line ensuring the information security strategy is aligned with business objectives and applicable laws.To proactively reduce the risk, likelihood and impact of any growing cyber threats or attack.To ensure effective IT policies are in place and embedded aligned to the business strategy.Respond to Security Incidents and ensure all stakeholders understand and perform their duties when an incident occurs.To ensure that backup and recovery policies, plans, procedures, testing and remediation is maintained and adequate across the business.Provide timely and accurate reports to the business.Ongoing management of the Information Security Management System.To conduct ISO 27001 audits throughout the business on a regular basis.

Requirements:
Key Accountabilities Embed Information security and assurance activities within the business line.Review of Security Architecture definitions.Maintain and review Information regulatory compliance, Cybersecurity.Periodic review, oversight and challenge of key IT risks across the business.Implement &amp; maintain ISO 27001 Certification.Proven experience of implementing procedures and policies around investigations, forensics, eDiscovery, Disaster Recovery, and business continuity.Set out security education programmes across the businessReview and maintain compliance with standards such as PCI-DSS, ISO27001, SOX, DPA, etc.Respond to bids/tenders regarding Information Security compliance.Oversee (at least) an annual refresh of policies.Stay abreast of information security issues and regulatory changes affecting the business.Engage in professional development to maintain continual growth in professional skills and knowledge essential to the position.Track all information technology and security related audits including scope of audits, business units involved, timelines, auditing agencies and outcomes.Work with auditors as appropriate to keep audit focus in scope, maintain excellent relationships with audit entitiesKeep abreast of security incidents and act as primary control point during significant information security incidents. Skills/ Experience requiredAt least 6 years’ experience in Information security / assurance positions.Experience within different regulatory and compliance environments.The ability to clearly communicate Information Security principles and objectives.Previously implemented ISO 27001 and attained certification.Experience in Procurement, Insurance or Financial industry exposure.Relevant security certifications such as CISSP, CRISC, CISA, CISM.Security within a cloud based environment.Deep knowledge of risk management, backup and Disaster Recovery policies processes and testing.-             Personal Specifications:Strong influencing &amp; negotiation skills and the ability to work with teams across geographic boundaries and cultures.Proven communication skills and collaboration skills.The ability to interact with all levels of management within the organisation.The ability to work effectively in an environment where there are a number of competing pressures.Strategic thinking and planning skills with financial and business acumen.Strong business and analytical skills and technical knowledge.Team playerOpen mindedCreative and innovativeRigorous attention to detailStrong projection and interpersonal skillsSelf-starter

Benefits: